Security Operations Analyst

Rootedsec; Northern (KY); Hybrid; USD 100,000 - 125,000; Full time

Job summary

Huntress is seeking a fully remote Security Operations Analyst in the United States to triage and respond to EDR alerts, investigate malware and Microsoft 365 threats within a managed SOC. The role emphasizes malware analysis, alert triage, and detection tuning, with potential weekend or 4x10 shifts for coverage.

You will review telemetry across Windows, Linux and macOS, contribute to playbooks, and collaborate with cross-functional teams to improve detection capabilities.

Qualifications

• 4+ years in a SOC or DFIR role.
• Windows, Linux and macOS as attack surfaces.
• MITRE ATT&CK and attacker techniques.
• Static and dynamic malware analysis.
• Active Directory and Group Policy knowledge.
• Networking and web/OWASP fundamentals.
• Remote within the US.

Responsibilities

• Triage, investigate and respond to platform alerts.
• Review EDR/SIEM telemetry and forensic artifacts to find root cause.
• Perform tactical malware analysis.
• Investigate suspicious Microsoft 365 / cloud activity.
• Contribute to detection creation and tuning

Skills

EDR/SIEM analysis

Malware analysis

Threat hunting

SOC/DFIR experience

Windows/Linux/macOS

Tools

EDR tools

SIEM

M365 security

Active Directory

Group Policy

Job description

# Security Operations AnalystRemote, United States· REMOTEPro Hacker+ signal## HuntressFully remote US SOC analyst investigating EDR alerts, malware and M365 threats in Huntress's managed SOC.Type: FULLTIMERange: USD 100,000–125,000 base per yearMode: REMOTEMinimum rank: Pro Hacker## About the roleAnalysts triage platform alerts, review EDR telemetry and forensic artifacts to determine root cause and remediation, and perform tactical malware analysis. They also investigate suspicious Microsoft 365 activity, support threat-related escalations and help tune detections. After initial training, the schedule may include weekends or a 4x10 shift.### What you will do* Triage, investigate and respond to platform alerts* Review EDR/SIEM telemetry and forensic artifacts to find root cause* Perform tactical malware analysis* Investigate suspicious Microsoft 365 / cloud activity* Contribute to detection creation and tuning### What they ask for* 4+ years in a SOC or DFIR role* Windows, Linux and macOS as attack surfaces* MITRE ATT&CK and attacker techniques (lateral movement, persistence, evasion)* Static and dynamic malware analysis* Active Directory and Group Policy knowledge* Networking and web/OWASP fundamentals* Remote within the US* Schedule may include weekend or 4x10 shifts